Security Operations Lead

What You'll Do

1. Security Operations Leadership & Team Development

Lead, mentor, and develop the security operations team, establishing clear priorities, responsibilities, and performance expectations.

Drive continuous improvement of security operations capabilities, processes, and overall team effectiveness.

Provide technical guidance, coaching, and resource prioritization to ensure effective execution of security initiatives.

2. Vulnerability Management

Own the end-to-end vulnerability management lifecycle, from assessment and risk-based prioritization to remediation tracking and validation.

Collaborate with Engineering, Infrastructure, and application owners to ensure vulnerabilities are addressed based on severity, exploitability, and business impact.

Monitor vulnerability exposure and remediation progress, escalating critical risks and overdue remediation when necessary.

3. Security Monitoring & Threat Detection

Oversee security monitoring and detection capabilities across endpoints, networks, identities, applications, infrastructure, and cloud environments.

Enhance threat detection through SIEM and EDR/XDR optimization, threat hunting, threat intelligence, and detection engineering.

Identify security visibility gaps and continuously improve monitoring coverage, alert quality, and investigation capabilities.

4. Incident Response

Lead the response to significant security incidents, covering investigation, containment, remediation, recovery, and root cause analysis.

Establish and maintain incident response procedures, playbooks, escalation paths, and communication protocols.

Conduct post-incident reviews and ensure corrective actions are implemented to prevent recurrence.

5. Security Processes, Automation & Reporting

Establish and optimize security operations procedures, automation, and workflows to improve efficiency and consistency.

Define and monitor key performance indicators (KPIs) to measure security operations effectiveness, incident response performance, and vulnerability remediation progress.

Provide management with clear reporting on security incidents, vulnerability exposure, operational performance, and improvement priorities.

What We're Looking For

5+ years of experience in cybersecurity, with substantial hands-on experience in security operations, vulnerability management, incident response, or threat detection.

Proven experience leading security operations activities, managing security risks, and coordinating cross-functional remediation efforts.

Practical knowledge of vulnerability assessment, risk-based prioritization, remediation tracking, and validation.

Strong technical understanding of SIEM, EDR/XDR, security monitoring, detection engineering, and incident response methodologies.

Solid understanding of threat intelligence, MITRE ATT&CK, common attack techniques, and security investigation practices.

Experience improving security operations through process optimization, automation, threat hunting, or detection tuning.

Strong leadership, analytical, communication, and stakeholder management skills, with the ability to prioritize risks and make decisions under pressure.

Nice to Have

Experience leading a security operations team within technology, fintech, financial services, or other mission-critical environments.

Experience with security monitoring and vulnerability management in GCP or AWS environments.

Familiarity with SOAR platforms, security automation, and incident response orchestration.

Experience in digital forensics, malware analysis, or advanced threat hunting.

Relevant certifications such as CISSP, GCIH, GCIA, GCFA, or equivalent practical experience.